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Knock & Talk (K&T) Debrief & Next Steps 
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Preparation for K&T Action 


e Analysis & Review of legal "stick" by NCL 
AP/NOA AP 
e Coordination with NTD (Eugene-san) and 
NERD (Alexander-san) on threat level of 
hacker target 
* Completed profile of hacker “Neimod" 
> Important to establish psychological approach 
with target (white, grey or black hat hacker?) 
> Informs "carrot vs. stick" approach 


> Intelligence confirmation of online/physical 
surveillance 
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Assemble K&T Team in Belgium 


e NOA AP Team 

e CSID Investigators 

e NERD 

e Local Licensed Investigator (Belgian, Dutch- 
Speaking) 
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: DAY 1 - K&T Preparation 
(Tuesday July 16 2013) 


e Team assembled in "Strategy Room" 
in Hasselt, Belgium. 

e Scripted & rehearsed "front door" 
dialogue 

e Discussed potential outcomes & 
reaction to dialogue 
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- DAY 2 (AM) - Pre-K&T Action 
(Wednesday July 17 2013) 


e NOA AP (Jason Allen) coordinated IRC and 
“scene” monitoring efforts with investigators 
and vendors 

e On-location physical surveillance 

e The morning of the action, a select Corp. 
Comm. person was advised of the broad 
concept to insure they did not respond to any 
media inquires without consulting with NOA AP. 
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f DAY 2 (PM) - K&T Action 
(Wednesday July 17 2013) 


* Team positioned at outdoor cafe near 
target's residence 

e Local Investigator alerted team to 
target leaving workplace 

e Team approached upon target's 
arrival at residence 
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- DAY 2 (PM) - KAT Action (continued) 
(Wednesday July 17 2013) 


e KAT Team at Doorstep: NOA AP (Fritz 
Kryman), CSID Online Investigator and local 
investigator 

e Introductions made in Dutch to parents: 
purpose of visit described and request to 
speak with target 

e Target arrived and agreed to discussion 

e Invitation to further discussion in 
residence's back yard garden ( K&T Team 
did not enter residence at any time) 
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- DAY 2 (PM) - KAT Action (continued) 
(Wednesday July 17 2013) 


* Discussion of Nintendo's concerns with hacker activity; cited Nintendo's 
interest in a discussion with Neimod pending execution of an NDA (as 
opposed to legal action) 

* Neimod agreed and executed NDA 

e Arrival of NERD into discussion and subtle hint of interest in 
collaboration; complete revelation of hacker activity and knowledge of 
3DS security 

* Neimod hesitated to sign settlement agreement; reguested more time 
to consider issue. 


e NOA AP reiterated the urgency and importance of execution of the 
Settlement Agreement but also respect for Neimod in terms of allotting 
him time to review, consider. 

e Late that evening, Neimod called, indicated interest in committing to 
settlement terms. Team returns to residence to execute settlement 
agreement and set time for continued discussion of collaboration the 
following evening. 


CONFIDENTIA 


f DAY 3 - Post-K&T Action 
(Thursday July 18 2013) 


e NOA AP & NERD discussion with French 
& Belgian employment law counsel 

e NOA AP & NERD discussion of 
"missions" for Neimod's consideration 

e Discussion with Neimod on "missions" 

* Target confirmed interest in formalizing 
collaboration with Nintendo and liked 
the proposed "missions” (e.g. Gateway 
analysis) 
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PDCA of K&T Action 


e Sharing of intelligence gathered from target with NCL 
(IRD) 

e Continued discussion with NERD and employment counsel 
on consulting agreement 

e Continued discussion of appropriate "bounty" for hackers 

e Confirmation that KAT preparation methodology works 
and must be adjusted specifically to each hacker target 

e Successful KAT action enhanced internal communications 
and Nintendo's ability to secure hardware, thwart game 
piracy & circumvention device development 

e Collaboration between NCL, NERD, NOA, NTD crucial to 
success of the action 
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- PDCA: Review of Merits of 
K&T 


* Diminish the risk of dispersing hacking info. 
[ DONE 

e Obtain hacking/technical info. [|] DONE 
> Technique of hacking/exploit [] DONE 
> Vulnerability info. J DONE 

e Fix the vulnerability through NUP [] IN PROGRESS 
> Reflect the info. in designing future security system [J 

IN PROGRESS 

e Obtain other hacker info. (possible) [] IN 

PROGRESS 
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PDCA: Review of Risk of KAT 
* Negative PR [] AVERTED 


> We may get backlash from hackers. [| AVERTED 
> Cyber attack to Nintendo (leak of personal 

info.) [|] AVERTED 

e May accelerate hacking activity [| AVERTED 

* Hacking community may go underground [] 
AVERTED 

e Potential risk when we hire any hackers [] 
MITIGATED 
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Next Steps 


e Propose next target (suggestions: "Yellows8", 
"marcan", "geohot") 
e Develop profiles for each target 
e Confirm real identity and physical location 
e Determine hacker status (white, grey, black) 


e Next stage of "hearts & minds" initiative 
e Outreach to development community (Waku Waku) 
e Leverage Neimod K&T to influence hacker 
community 


e Formalize hacker "bounty" and promote positive 
image of Nintendo re: security and software 
development 


